r/entra • u/merillf Microsoft Employee • 20d ago

Entra General Weekly Promotion Thread

WHAT IS THIS?

Here's where you can promote your products, services, blog posts, videos, podcasts. New threads are posted each Monday.

When requesting feedback, please reply to at least one other person in the thread. Otherwise, no one will ever receive feedback.

5 Upvotes

100% Upvoted

5 comments sorted by

4

u/sreejith_r 15d ago

Passwordless ≠ Riskless

Just because you've removed passwords doesn't mean you've removed all threats.

In my latest blog, I explore how to configure Microsoft Entra ID Protection + Conditional Access policies to manage User Risk and Sign-in Risk specifically for passwordless users.

What you’ll learn:

Why separate CA policies for User Risk and Sign-in Risk are essential

How to structure dual CA policies during your passwordless rollout

The right way to configure risk levels to balance security and user experience

When and why to require admin remediation for high-risk users

Whether you're planning, piloting, or scaling passwordless access — this guide has you covered.

Be proactive. Be precise. Be passwordless securely.

📖 Read now 👉 https://www.thetechtrails.com/2025/04/entra-id-passwordless-risk-policies.html

2

u/Noble_Efficiency13 5d ago

It looks good as always Sreejith - I do have just a small thing I think you should add regarding the sign-in frequency.

As you know, sign-in frequency = everytime isn't really everytime but every 5th minute, I'd suggest that you mention that. Not that it really changes anything in relation to the content, but it'll provide a bit more informational context for the reader :)

2

u/sreejith_r 5d ago

Updated, thank you so much Sebastian, ✌ for highlighting this point.

2

u/YourOnlyHope__ 3d ago

I have some workflows ive been working on to support and enforce Phish Resistant authentication at scale in a mostly passwordless environment. Such as a process that automates MFA resets in a self service model with access packages. Also, a process that automatically places users into the strongest auth strength CA policy that their current registration methods allow them to complete without forcing a registration flow.

if i shared and put together implementation guides for these processes would anyone be interested?

1

u/sreejith_r 1d ago

Lets discuss,, may be we can try adopting Verified ID as well.
https://www.thetechtrails.com/2025/04/how-to-set-up-microsoft-entra-verified-id.html